Application Security Engineer

Our client is seeking a hands‑on Application Security Engineer to secure and harden next‑generation generative AI applications and platforms. This individual will be joining the Platform & Engineering team under the CTO. This a rare opportunity to join a small, elite engineering group shaping the future of AI across the organization, working at the intersection of cutting‑edge AI, platforms, and application security.

This team builds generative AI products used by employees, developers, and clients alike - from productivity tools (report writing, email, knowledge discovery) to client‑facing AI platforms. As these products move closer to consumer and retail banking use cases, security is critical. This role exists to actively break, exploit, and then secure real AI systems in production, not to define policy or theory.

Key Responsibilities

• Hack and assess generative AI applications and developer platforms to identify, exploit, and remediate real‑world vulnerabilities
• Engineer security solutions directly into production AI systems from day one
• Secure emerging AI application attack surfaces, including prompt injection, access control, and API abuse
• Design and build security tooling and frameworks that scale across AI platforms
• Embed security best practices into fast‑moving development workflows without slowing delivery
• Partner closely with engineers and product teams through hands‑on collaboration and pair programming

Requirements

• Strong Golang engineering background with hands‑on application security experience
• Proven track record securing production, business‑critical systems
• Experience with ethical hacking, penetration testing, and thinking like an attacker
• Ability to move from vulnerability discovery to practical, shippable fixes
• Experience building or securing APIs, platforms, or developer tools
• Interest in AI security (LLM or generative AI experience helpful, but not required)
• Background in modern tech or high‑scale environments strongly preferred